Information Security Magazine

Russian state actor Midnight Blizzard is using fake wine tasting events as a lure to spread malware for espionage purposes, according to Check Point

An NTLM hash disclosure spoofing vulnerability that leaks hashes with minimal user interaction has been observed being exploited in the wild

Bipartisan support grows in Congress to extend Cybersecurity Information Sharing Act for 10 years

IBM warns of infostealer surge as attackers automate credential theft and adopt AI to generate highly convincing phishing emails en masse

Microsoft has blocked fraud worth $4bn as threat actors ramp up AI use

MITRE will be able to keep running the CVE program for at least the next 11 months

Sophos found that compromise of network edge devices, such as VPN appliances, accounted for 30% of incidents impacted SMBs in 2024

A UK Law firm has been fined £60,000 after data stolen during a 2022 cyber-attack was published on the dark web

Hertz has confirmed a data breach exposing customer data after a zero-day attack targeting file transfer software from Cleo Communications

NVISO discovered new variants of the BRICKSTORM backdoor, initially designed for Linux, on Windows systems

Study reveals 92% of mobile apps use insecure cryptographic methods, exposing millions to data risks

DataDome warns that DYI bots are snapping up driving test places en masse

Security community reacts with shock at US government’s decision not to renew MITRE contract for CVE database

Posing as potential employers, Slow Pisces hackers conceal malware in coding challenges sent to cryptocurrency developers on LinkedIn

Regulatory compliance and data protection were the biggest cybersecurity challenges cited by UK financial organizations, according to a Bridewell survey

Thales report reveals bots now account for 51% of all web traffic, surpassing human activity

Pentesting firm Cobalt has found that organizations fix less than half of exploited vulnerabilities, with just 21% of generative AI flaws addressed

A UK man has been sentenced to over eight years for masterminding £100m phishing platform LabHost

Flaw in SureTriggers plugin allows unauthenticated users to create admin accounts on WordPress sites

Through the SYS Initiative, Prodaft is offering a secure, anonymous channel for individuals to share information about ongoing cybercrime activities